Re: Regression: kernel 4.14 an later very slow with many ipsec tunnels

[David Miller]

From: Florian Westphal <fw@xxxxxxxxx>
Date: Thu, 13 Sep 2018 18:38:48 +0200

> Wolfgang Walter <linux@xxxxxxx> wrote:
>> What I can say is that it depends mainly on number of policy rules and SA.
> 
> Thats already a good hint, I guess we're hitting long hash chains in
> xfrm_policy_lookup_bytype().

I don't really see how recent changes can influence that.

And the bydst hashes have been dynamically sized for a very long time.

I might have missed something...